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IN THE CLAIMS: 

This listing of claims will replace all prior versions, and listings, of claims in the 
present application: 

1. (Currently amended) A method of operating a storage server, the method 
comprising: 

receiving at the storage server, from a client, a first request to perform a storage- 
related operation relating to a set of data; 

responding to the first request at the storage server by using metadata in the 
storage server to determine whether the set of data is stored in local storage of the 
storage server or e xternally to, and remotely from, the storage server; 

gen e rating a second r e qu e st i n the storage s e rv e r in response to determining 
that the set of data is stored externally to, and remotely from, the storage server[[;]L. 
generating a second request in the storage server: and 
sending the second request and information relating to the set of data 
from the storage server to a policy engine, wherein the policy engine responds to the 
second request by applying an applicable policy based on the information relating to 
the set of data, retrieving the set of data from storage on behalf of the storage server 
and provid e s providing t he set of data to the storage server in conjunction with a first 
response; 

receiving the first response and the set of data at the storage server, from the 
policy engine, the first response indicating a result of the policy engine having 
implemented a -the p olicy based on the information relating to the set of data; and 

sending a second response in accordance with the first response from the 
storage server to the client. 
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2. (Original) A method as recited in claim 1, wherein the policy engine is external 
to the storage server. 

3. (Original) A method as recited in claim 1, wherein the storage server and at 
least a portion of the policy engine are implemented in a single physical platform. 

4. (Original) A method as recited in claim 1, wherein the first request is a request 
for a file managed by the storage server. 

5-6. (Canceled) 

7. (Original) A method as recited in claim 4, wherein the file type of the file is 
indicated in the information relating to the set of data. 

8. (Canceled) 

9. (Original) A method as recited in claim 1 , wherein the policy engine determines 
whether to approve or deny the second request based on an identity of the client. 

10. (Original) A method as recited in claim 1, wherein the policy engine determines 
whether to approve or deny the second request based on an identity of a user of the 
client. 

11. (Original) A method as recited in claim 1, wherein the policy engine determines 
whether to approve or deny the second request based on an identity of the storage 
server. 
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12. (Original) A method as recited in claim 11, wherein the information relating to 
the set of data comprises information specifically identifying the storage server from 
among a plurality of storage servers that are coupled to the policy engine. 

13. (Original) A method as recited in claim 1, wherein the policy engine determines 
whether to approve or deny the second request based on a quota. 

14. (Original) A method as recited in claim 1, wherein the policy engine determines 
whether to approve or deny the second request based on a number of times the set of 
data has been accessed during a period of time. 

15. (Original) A method as recited in claim 1, wherein the storage server defers 
sending the client any response to the first request until the storage server receives the 
first response from the policy engine. 

16. (Canceled) 

17. (Original) A method as recited in claim 1 , further comprising: 

using one of a plurality of storage protocols implemented by the storage server to 
access the set of data, the plurality of storage protocols including a block-level storage 
protocol and a file-level storage protocol. 

18. (Currently amended) A method of operating a policy engine, the method 
comprising: 

receiving at the policy engine, from a storage server, a first request and 
information relating to a set of data, the first request being in response to a storage- 
related client request received by the storage server from a client and relating to the set 
of data; 
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applying a policy in the policy engine using the information relating to a set of 

data; 

responding to the first request at the policy engine by retrieving the set of data 
from storage on behalf of the storage serve r after applying the policy : and 

providing the set of data from the policy engine to the storage server in 
conjunction with a first response, the first response indicating a result of applying the 
policy, the first response to cause the storage server to send a second response to the 
client in accordance with the first response. 

19. (Original) A method as recited in claim 18, wherein the policy engine is external 
to the storage server. 

20. (Original) A method as recited in claim 1 8, wherein the storage server and at 
least a portion of the policy engine are implemented in a single physical platform. 

21. (Original) A method as recited in claim 18, wherein the client request is a 
request for a file managed by the storage server. 

22-23. (Canceled) 

24. (Previously Presented) A method as recited in claim 18, wherein the file type of 
the file is indicated in the information relating to the set of data. 

25. (Original) A method as recited in claim 18, further comprising using the policy 
engine to define a criterion in the storage server, for use by the storage server to 
determine when a subsequent client request is to be referred to the policy engine for 
resolution. 
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26. (Previously Presented) A method as recited in claim 18, wherein applying the 
policy comprises approving or denying the second request based on an identity of the 
client. 

27. (Previously Presented) A method as recited in claim 18, wherein applying the 
policy comprises approving or denying the second request based on an identity of a 
user of the client. 

28. (Previously Presented) A method as recited in claim 18, wherein applying the 
policy comprises approving or denying the second request based on an identity of the 
storage server. 

29. (Previously Presented) A method as recited in claim 18, wherein applying the 
policy comprises approving or denying the second request based on a user-based 
quota. 

30. (Previously Presented) A method as recited in claim 18, wherein applying the 
policy comprises approving or denying the second request based on a quota applicable 
to the set of data. 

31. (Previously Presented) A method as recited in claim 18, wherein applying the 
policy comprises approving or denying the second request based on a quota applicable 
to the storage server. 

32. (Previously Presented) A method as recited in claim 18, wherein applying the 
policy comprises approving or denying the second request based on a number of times 
the set of data has been accessed during a period of time. 

33. (Canceled) 
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34. (Currently amended) A storage system comprising: 

a storage server to provide a client with access via a network to data in a mass 
storage facility, the storage server configured to receive from the client a first request to 
perform a storage-related operation relating to a set of data managed or to be managed 
by the storage server, and to generate a second request if the first request satisfies a 
defined criterion; and 

a remote policy engine coupled to the storage server to receive the second 
request and information relating to the set of data from the storage server, the remote 
policy engine configured to approve or deny the second request by implementing a 
policy using the information relating to the set of data, to send a first response to the 
storage server based on a result of implementing the policy, the storage server further 
configured to send a second response to the client in accordance with the first 
response; 

wherein the storage server responds to the first request by using metadata in the 
storage server to determine ttert -whether t he set of data is stored in local storage of the 
storage server or e xternally to, and remotely from, the storage server, and the remote 
policy engine responds to the second request by retrieving the set of data from remote 
storage on behalf of the storage server and provides the set of data to the storage 
server in conjunction with the first response. 

35. (Original) A storage system as recited in claim 30, wherein the first request is a 
request for a file managed by the storage server. 

36-37. (Canceled) 

38. (Original) A storage system as recited in claim 33, wherein the file type of the file 
is indicated in the information relating to the set of data. 
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39. (Original) A storage system as recited in claim 34, wherein the remote policy 
engine determines whether to approve or deny the second request based on the client. 

40. (Original) A storage system as recited in claim 34, wherein the remote policy 
engine determines whether to approve or deny the second request based on a user- 
based quota. 

41. (Original) A storage system as recited in claim 34, wherein the remote policy 
engine determines whether to approve or deny the second request based on a quota 
applicable to the set of data. 

42. (Original) A storage system as recited in claim 34, wherein the information 
relating to the set of data comprises information specifically identifying the storage 
server from among a plurality of storage servers that are coupled to the remote policy 
engine. 

43. (Original) A storage system as recited in claim 34, wherein the remote policy 
engine determines whether to approve or deny the second request based on a number 
of times the set of data has been accessed during a period of time. 

44. (Original) A storage system as recited in claim 34, wherein the storage server 
does not send the client any response to the first request until the storage server 
receives the first response from the remote policy engine. 

45. (Canceled) 

46. (Original) A storage system as recited in claim 34, wherein the storage server is 
operable to implement each of a plurality of storage protocols to access data, the 
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plurality of storage protocols including a block-level storage protocol and a file-level 
storage protocol. 

47. (Previously Presented) A storage system comprising: 

a plurality of storage servers, each to provide a set of clients with access to 
corresponding stored data; and 

a policy engine to receive requests from each of the storage servers, each 
request being based on a previous storage-related request received by one of the 
storage servers from a client, the policy engine configured to respond to each request 
by implementing one or more of a set of storage-related policies and to send a response 
to a requesting storage server based on a result of implementing the policy, wherein 
one or more of the policies are specific to a particular storage server, and wherein the 
storage servers respond to the storage-related requests from clients in a manner 
synchronous with the responses from the policy engine. 

48. (Previously Presented) A method of operating a storage server, the method 
comprising: 

receiving at the storage server, from a client, a request to perform a storage- 
related operation relating to a set of data; 

if the first request satisfies a defined criterion, then operating the storage server 
to invoke a policy engine configured to determine a disposition of the request, the policy 
engine being external to the storage server, wherein the policy engine operates to 
restrict access to the set of data, including restricting ability to open, close and modify 
the set of data; 

receiving at the storage server a response from the policy engine indicating a 
disposition of the request; and 

responding to the request in accordance with the response from the policy 
engine. 



67272-8128. US03/LEGAL15 166363.1 



9 



